Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-32665 EUVD-2022-35731GHSA-pj6m-6h37-qw44

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no a…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Description

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.

Affected products

VendorProductAffectedFixed
MediaTek EN7528, EN7580 Linux SDK versions less than TLB7.3.258.100-P1-1555 —

References